PT-2000-1062 · Microsoft · Iis

Published 2000-01-11 · Updated 2018-10-30 · CVE-2000-0071

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description A remote attacker can obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.

Recommendations For IIS version 4.0, consider restricting access to files with .ida and .idq extensions to prevent disclosure of the document root pathname.

Fix

Related Identifiers

CVE-2000-0071

Affected Products

Iis

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0071 · Security Note
• http://marc.info/?l=bugtraq&m=94780058006791&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0071 · Note
• http://marc.info/?l=bugtraq&m=94770020309953&w=2 · Note